Error 1 in loading CA ControlMinder kernel

Products

CA Virtual Privilege Manager CA Privileged Identity Management Endpoint (PIM) CA Privileged Access Manager (PAM) CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

CA PIM 12.8 SP1 was installed on an OEL Kernel, but the SEOS_syscall was not loaded when the seload command was run.

[root@demo-server bin]# ./seload
CA ControlMinder seload v12.81.0.3073 - Loader Utility
Copyright (c) 2013 CA. All rights reserved.
SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_load_int.always -pre
SEOS_load: "Oracle Linux Server 6.9" Kernel: 4.1.12-94.7.8.el6uek.x86_64
SEOS_load: /opt/CA/AccessControl/bin/SEOS_syscall.60-4112-9478-UEKX86_64.MP.ko
CA ControlMinder seversion v12.81.0.3073 - Display module's version

Running under: Linux

File name: /opt/CA/AccessControl/bin/SEOS_syscall
Version : 12.81.0.3073
Created : Jan 25 2018 02:24:31
OS info : Kernel: 4.1.12-94.7.8.el6uek _LINUX60-41
SHA1 : 6263D826B1F693A736F777B6D9CDC1C187536955
MD5 : 84E0D52BBDB8F8F302D817937DFBECB1
SEOS_load: dmesg:
SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_load_int.always -post
SEOS_load: SEOS_syscall WASN'T loaded

In /var/log/messages, the following error messages occur at the time seload was called.

May 14 09:47:24 demo-server seload[390316]: Loading CA ControlMinder kernel extension.
May 14 09:47:24 demo-server seload[390316]: Error 1 in loading CA ControlMinder kernel

Environment

Privileged Identity Manager 12.8 SP1
OEL or RHEL kernels with UEFI Secure Boot

Cause

UEFI Secure Boot was enabled in this Oracle Exadata machine, which is not supported for PIM endpoints.

Resolution

UEFI Secure Boot should be disabled on the server in order for the PIM kernel to be loaded successfully.

Additional Information

There are some PAM Server Control endpoint versions which can support UEFI Secure Boot, refer to the PAMSC Compatibility Matrix to determine which version is compatible with the OS kernel.